JomSocial 1.8.8 Shell Upload

There is a file upload vulnerability in version 1.8.8 and earlier of JomSocial, the popular community extension for Joomla!. Successful exploitation of this exploit requires the site to be configured to allow users to upload video files directly, which is disabled by default. If this feature is...

JomSocial 1.8.8 Shell Upload Vulnerability

Exploit for php platform in category web applications ========================================== JomSocial 1.8.8 Shell Upload Vulnerability ========================================== There is a file upload vulnerability in version 1.8.8 and earlier of JomSocial, the popular community extension fo...

All Eyes On Stuxnet At Annual Virus Researcher Summit

The world will know more about the mysterious Stuxnet virus by week’s end, after top virus researchers reveal the findings of their post mortem on Stuxnet at the annual Virus Bulletin Conference. HED: All eyes on Stuxnet at annual virus researcher summit DEK: Researchers will reveal new details...

Storyteller CMS Local File Inclusion

== Title: Storyteller CMS var Local File Include Vuln Version: n/a Link: http://www.esselbach.com/freeware.php?id=2 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Vuln code: in GetTemplate function , line 113 to 127 function GetTemplate$var if fileexists"templates/$var.tmp.php"...

Accton-based switches (3com, Dell, SMC, Foundry, EdgeCore) Backdoor

Exploit for windows platform in category remote exploits =================================================================== Accton-based switches 3com, Dell, SMC, Foundry, EdgeCore Backdoor =================================================================== On the 15th of august 2009, at the...

Cisco IOS Software SNMP Read-Write ILMI Community String Vulnerability - Cisco Systems

Cisco IOS Software releases based on versions 11.x and 12.0 contain a defect that allows a limited number of SNMP objects to be viewed and modified without authorization using a undocumented ILMI community string. Some of the modifiable objects are confined to the MIB-II system group, such as...

Cisco IOS Software Multiple SNMP Community String Vulnerabilities - Cisco Systems

Multiple Cisco IOS Software and CatOS software releases contain several independent but related vulnerabilities involving the unexpected creation and exposure of SNMP community strings. These vulnerabilities can be exploited to permit the unauthorized viewing or modification of affected devices. ...

WebSuite Content Management System SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== WebSuite Content Management System SQL Injection Vulnerability ============================================================== Exploit Title: WebSuite Content Management System SQL...

MySQL Community Server < 5.1.49 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is earlier than 5.1.49 and thus potentially affected by multiple vulnerabilities: - DDL statements could cause the server to crash. 55039 - Joins involving a table with a unique SET column could cause the server to crash. 54575 -...

New Conference Wants to Bring Malware Writers Out of the Shadows

ED: Malcon Conference hopes to bring malware writers out of the shadows DEK: Malcon, a new, Mumbai-based conference, says that the security community can benefit from what malware authors have to teach. The computer security community is used to vilifying the hackers and malware authors who choos...

MySQL Community Server 5.1 < 5.1.49 Multiple Denial of Service Vulnerabilities

Binary data 801140.prm...

Tplayer V1R10 - Denial of Service

!/usr/bin/python print "--------------------Exploit By 41.w4r10r------------------------------\n" print "-------------------41.w4r10r@gmail.com-----------------------------\n" print "----------------Tplayer V1R10 DoS Exploit------------------------------\n" print "-------------Vendor Site :...

Dolphin Smart Community Builder Sql Injection Vulnerability

Exploit for php platform in category web applications =========================================================== Dolphin Smart Community Builder Sql Injection Vulnerability =========================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1...

KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability

Exploit for php platform in category web applications ================================================================= KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability ================================================================= Exploit Title: KnowledgeTree 3.5.2 Community...

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version:...

Zendesk Multiple Vulnerabilities

Exploit for multiple platform in category web applications ================================ Zendesk Multiple Vulnerabilities ================================ /????????????????????????????????\ :Zendesk Multiple Vulnerabilities : / /Discovered By: \ |Luis Santana | / Overview ?????????? Luis...

dreamsoft SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== dreamsoft SQL Injection Vulnerability ===================================== Special to adhan a.k.a Cr4wL3R --- Dont Talk : My Last Exploit, I dont Like !!! :, We all, Big Family H4ckb0x Organization miss u...

Vulnerability Broker Draws Line in Disclosure Sand

Looking to put pressure on software vendors who procrastinate on fixing security flaws, the world’s biggest broker of vulnerability data is drawing a line in the sand. Starting August 4, TippingPoint’s Zero Day Initiative ZDI will enforce a six-month deadline for patches on all vulnerabilities...

Joomla com_adsmanager SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Joomla comadsmanager SQli Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Discuz7. 2 of my vest plug-injection vulnerability-a vulnerability warning-the black bar safety net

Discuz! A common set of community forums software system, the user can not require any programming on the basis of, through the simple setup and installation, on the Internet build up with perfect function, strong load capacity, and highly customizable Forum service Vulnerability plug-in:...